Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

relax recommendation against requested_token_type use #82

Closed
bc-pi opened this issue Feb 20, 2024 · 1 comment · Fixed by #83
Closed

relax recommendation against requested_token_type use #82

bc-pi opened this issue Feb 20, 2024 · 1 comment · Fixed by #83

Comments

@bc-pi
Copy link
Contributor

bc-pi commented Feb 20, 2024

Placeholder issue noting that @aaronpk's use case utilizes requested_token_type while the the current text https://www.ietf.org/archive/id/draft-ietf-oauth-identity-chaining-01.html#section-2.3.1-1 has a SHOULD NOT. With the recent change to limit token types to JWTs #45 that SHOULD NOT isn't as meaningful/useful. Suggestion (from me) is to remove mention/treatment of the parameter from 2.3.1 https://www.ietf.org/archive/id/draft-ietf-oauth-identity-chaining-01.html#name-token-exchange-request

@bc-pi bc-pi changed the title relax recommendation aganst requested_token_type use relax recommendation against requested_token_type use Feb 21, 2024
@aaronpk
Copy link
Member

aaronpk commented Feb 23, 2024

We discussed on the Feb 23 call and there was general agreement that removing the parameter is the right call, and won't have any negative consequences on implementations of this draft.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants